APP: VMWare VCenter Chargeback Manager ImageUploadServlet Arbitrary File Upload
This signature detects attempts to exploit a known vulnerability against Vmware vCenter Chargeback Manager. A successful attack can lead to arbitrary code execution.
Extended Description
VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecified vectors.
Affected Products
Vmware vcenter_chargeback_manager
Short Name
APP:VMWARE-VCENTER-CHARGEBACK
Severity
Major
Recommended
False
Recommended Action
Drop
Category
APP
Keywords
Arbitrary CVE-2013-3520 Chargeback File ImageUploadServlet Manager Upload VCenter VMWare bid:60484
Release Date
10/10/2013
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
False Positive
Unknown
Vendors
Vmware
CVSS Score
7.5